Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: KQawHdmy1OUdIlhA1+8gaKvqPFWnc4mQIbqaEEqtweE=
Subject key identifier: 38:54:A8:75:FA:55:9D:B1:86:67:FF:EF:83:65:28:D8:65:9F:DC:7E
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019EBF2381AC8D1B3931F4EABF86AFCC860A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 137B
Signing time: Sat 13 Jun 2026 04:00:35 +0000
Manifest this update: Sat 13 Jun 2026 04:00:35 +0000
Manifest next update: Sun 14 Jun 2026 04:00:35 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: nri1CR79WK+sXFFD02vwzbfwmtlW7uV4CKHy89A5ZKg=)
3: oR0gnNQtbyEYAy7mwLQOgUnAVks.asa (hash: IL0c2dg9/TlrWdwFPpQ8ALDudM34OvD9yFi3lxfwjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:81:ac:8d:1b:39:31:f4:ea:bf:86:af:cc:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Jun 13 04:00:35 2026 GMT
Not After : Jun 14 04:00:35 2026 GMT
Subject: CN=3854a875fa559db18667ffef836528d8659fdc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:0a:a0:0a:27:89:41:ad:60:27:fb:bf:f2:
9b:e9:b2:3b:1b:b4:7f:4a:4d:9e:d7:78:3e:f1:45:
22:fc:d9:56:0a:2e:49:1c:01:0f:45:29:81:7d:76:
6d:fe:61:4b:9d:b5:ac:7e:24:23:d7:6a:0c:88:68:
d5:44:28:61:60:6c:47:22:8a:2f:7e:01:e7:b0:d9:
13:ae:ee:85:29:c4:b8:f7:ce:0c:4c:c4:c7:5e:92:
51:40:07:6f:80:93:23:10:55:15:7d:cf:cb:2d:52:
2a:e0:7c:82:c5:00:6f:45:a6:3a:6b:65:5d:7e:3e:
e4:3a:2e:24:04:33:55:57:44:23:36:77:07:f3:bf:
c6:78:5e:d7:bc:e8:67:f8:83:3c:73:56:b4:27:ed:
e7:25:f1:20:62:1a:0e:52:c0:fb:63:7c:05:20:a0:
66:94:3d:a7:77:7f:80:6a:e7:d6:28:85:a4:1d:fb:
1f:cf:d4:18:39:5e:2d:e7:07:a4:cd:6c:aa:9b:b1:
09:91:dc:1d:42:47:5c:bf:58:e9:d9:f5:bc:98:1b:
53:5f:82:f0:b5:4c:c5:41:6e:71:b3:1b:f9:e0:50:
aa:49:35:2f:00:9a:cc:7d:ed:38:e8:e2:f5:3c:c7:
22:5d:b0:a7:e4:03:70:d9:02:24:92:82:57:6a:1b:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:54:A8:75:FA:55:9D:B1:86:67:FF:EF:83:65:28:D8:65:9F:DC:7E
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9e:93:78:99:4e:5f:fa:95:cf:a0:c5:a7:7e:27:4b:16:bf:
33:91:23:b3:40:bf:57:36:4c:95:19:b3:69:9e:d0:ac:7c:a7:
bd:84:35:b0:c4:7e:f2:ec:67:0a:42:b0:1d:34:de:c0:cc:1b:
df:ed:2a:ba:6b:94:d6:21:5d:97:70:59:e4:06:a3:a1:75:08:
da:51:07:53:80:ad:fd:70:1b:65:06:d0:8f:ee:ea:be:11:6a:
20:bf:0c:1c:0a:2f:ad:5f:4e:28:f1:d3:be:03:e2:86:8a:58:
cc:9c:6d:73:65:52:48:09:33:10:2d:fb:58:e5:1d:25:ba:ce:
af:5a:01:ef:4f:f6:bf:31:c0:cc:2c:29:48:5a:ea:03:b4:77:
25:2e:96:c9:5c:c4:93:68:58:6e:e0:a8:17:a4:2f:13:73:c6:
11:4f:df:69:61:25:fe:e6:9f:2b:18:67:a7:1c:14:d8:15:9b:
04:0d:3d:54:87:ab:67:1c:69:42:da:58:8d:36:ac:a0:07:9f:
3b:d2:6d:8a:1f:9b:a3:6e:dc:9b:e5:13:dd:74:6b:40:f1:55:
a6:98:90:b9:70:fe:fc:33:8c:78:1e:22:cd:f6:7c:7c:4d:5b:
6e:47:ff:0b:1b:c9:74:5d:03:3f:d4:8a:c0:63:3d:f6:06:3a:
c9:25:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:15:01 2026 by rpki-client